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AMENDMENTS TO THE CLAIMS 

1 . (Previously Presented) A method in a consumer system with a processor 
and a memory for determining whether an application is misbehaving, the method 
comprising: 

when installing an application, 

establishing a limit on services of a service provider that the application is 
authorized to use based on published requirements of the 
application; 

determining by the processor whether the application is authorized to 
request services of the service provider by asking the service 
provider if the application is authorized to use the service provider, 
wherein the service provider determines that the application is not 
authorized based on notifications received from other consumer 
systems indicating that the application is misbehaving; 
when it is determined that the application is authorized to request services 

of the service provider, installing the application; and 
when it is determined that the application is not authorized to request 
services of the service provider, not installing the application; and 
under control of a runtime environment after the application has been installed, 
providing the application with access to the established limit; 
when the application requests a service of the service provider, 

determining by the processor whether the request would exceed 
the established limit that is based on published requirements 
of the application; 
when it is determined that the request would not exceed the 
established limit, requesting the service provider to provide 
the service; and 
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when it is determined that the request would exceed the 
established limit, 

notifying the service provider that the application is 

misbehaving; and 
prohibiting execution of the application on the consumer 

system. 

2. (Original) The method of claim 1 wherein the prohibiting includes 
uninstalling the application. 

3-4. (Canceled) 

5. (Original) The method of claim 1 wherein the service provider aggregates 
notifications provided by different consumer systems to determine whether the 
application should be authorized to request services of the service provider. 

6. (Original) The method of claim 1 wherein the service provider aggregates 
notifications provided by the consumer system to determine whether the consumer 
system should not be authorized to request services of the service provider. 

7-8. (Canceled) 

9. (Original) The method of claim 1 wherein multiple service providers can 
provide equivalent services and the application can requests services one of those 
service providers as designated by the consumer system. 
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10. (Previously Presented) A method in a computer system with a processor 
and a memory for apprising a service provider when an application that uses services of 
a service provider is misbehaving, the method comprising: 

providing an indication of misbehavior for the application when the application 

requests services of the service provider; and 
under control a runtime environment, 

when the application requests a service of the service provider, 

determining by the processor whether the application is behaving in 

accordance with the indication of the misbehavior; 
when it is determined that the application is not behaving in 
accordance with the indication of misbehavior, requesting 
the service provider to provide the service; and 
when it is determined that the application is behaving in accordance 
with the indication of misbehavior, 

notifying the service provider that the application is 
misbehaving so that the service provider can 
determine with the application is misbehaving and 
revoke authorization of the application to use the 
service provider; and 

prohibiting execution of the application. 

1 1 . (Original) The method of claim 10 wherein the indication of misbehavior is 
exceeding a number of requests for services of the service provider. 

12. (Original) The method of claim 10 wherein the prohibiting includes 
uninstalling the application. 



4 1 826-8001 .US00/LEGAL 1 5982647. 1 



4 



Application No. 10/789,805 

Reply to Office Action of September 17, 2008 



Docket No.: 41 8268001 US 



13. (Original) The method of claim 10 including before installing the 
application determining whether the application is authorized to request services of the 
service provider. 

14. (Original) The method of claim 10 wherein the service provider 
aggregates notifications provided by different consumer systems to determine whether 
the application should be authorized to request services of the service provider. 

15. (Original) The method of claim 10 wherein the service provider 
aggregates notifications provided by a consumer system to determine whether the 
consumer system should not be authorized to request services of the service provider. 

16. (Original) The method of claim 10 wherein the limit is established by a 
user of a consumer system. 

17. (Previously Presented) A method of a service provider for determining 
whether an application should not be authorized to request services of the service 
provider, the method being implemented by a computer system with a processor and a 
memory, the method comprising: 

when service consumers determine that the application is misbehaving, receiving 
notifications of the misbehavior from the service consumers, wherein the 
application misbehaves when the application requests certain services of 
the service provider; 

determining by the processor whether a condition of misbehavior is satisfied 
based on the received notifications from different consumers indicating 
that the application is misbehaving when executed by the different 
consumers; and 
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when a service request is received to provide services to the application and it is 
determined that the condition of misbehavior is satisfied, refusing to 
provide the requested service. 

18. (Original) The method of claim 17 wherein the condition of misbehavior is 
when multiple service consumers provide notifications that the application has 
attempted to exceed an established limit of requests for services from the service 
provider. 

19. (Original) The method of claim 17 including receiving from another 
service provider a notification that the application is misbehaving wherein the condition 
of misbehavior is satisfied based on the notification received from another service 
provider. 

20. (Original) The method of claim 17 including notifying service consumers 
that the application is not authorized to request services of the service provider. 

21. (Previously Presented) The method of claim 20 wherein a service 
consumer requests the service provider to indicate whether the application is 
authorized. 

22. (Original) The method of claim 17 wherein the condition of misbehavior is 
based on an aggregation of the service consumer notifications. 

23. (Previously Presented) A computer system with a processor and a 
memory for providing notification to a service provider that an application executing at a 
service consumer is misbehaving, comprising: 

a component that installs the application on the service consumer when a service 
provider indicates that the application has not been misbehaving an 
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indicated by notification received by other service consumers and 
establishes an indication of misbehavior for the application when the 
application requests services of the service provider; and 
a runtime environment that requests the service provider to provide a service 
when the application requests a service of the service provider and when 
the application does not behave in accordance with the established 
indication of misbehavior for the application, and that notifies the service 
provider that the application is misbehaving when the application behaves 
in accordance with the established indication of misbehavior for the 
application. 

24. (Original) The computer system of claim 23 including prohibiting 
execution of the application when the application behaves in accordance with the 
indication of misbehavior. 

25. (Previously Presented) The computer system of claim 24 wherein the 
prohibiting includes uninstalling the application. 

26. (Original) The computer system of claim 23 wherein the indication of 
misbehavior is exceeding a number of requests for services of the service provider. 

27. (Original) The computer system of claim 23 including a component that, 
before installing the application, determines whether the application is authorized to 
request services of the service provider. 

28. (Original) The computer system of claim 23 wherein the service provider 
aggregates notifications provided by different consumer systems to determine whether 
the application should be authorized to request services of the service provider. 
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29. (Original) The computer system of claim 23 wherein the service provider 
aggregates notifications provided by a consumer system to determine whether the 
consumer system should not be authorized to request services of the service provider. 

30. (Original) The computer system of claim 23 wherein the limit is 
established by a user of a service consumer. 
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